Sring MVC 环境下的Shiro集成测试

由于在Service层通过annotation限定了访问权限，并且需要根据用户权限进行业务数据过滤，因此shiro官方提供的方案实现不了。如果只是简单的需求，可以参照官方文档。

shiro配置

为了能够集成测试，需要为shiro单独设立一个测试用的配置文件，和运行时配置文件相比唯一的区别是使用了不同的SecurityManager，由于集成测试环境并不是真正的Web环境，所以使用DefaultSecurityManager.

applicationContext-shiro-test.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd"
       default-lazy-init="false">

    <bean id="securityManager" class="org.apache.shiro.mgt.DefaultSecurityManager">
        <property name="realm" ref="shiroDbRealm"/>
        <!--<property name="cacheManager" ref="shiroEhcacheManager" />-->
    </bean>
</beans>

测试基类

@ContextConfiguration({"classpath:spring/applicationContext.xml"})
@ActiveProfiles("dev")
public abstract class AbstractServiceTests extends AbstractTransactionalJUnit4SpringContextTests {
}

集成shiro的测试基类

@ContextConfiguration({"classpath:spring/applicationContext.xml", "classpath:/spring/applicationContext-shiro-test.xml"})
public abstract class AbstractServiceTestWithShiro extends AbstractServiceTests {
    private static ThreadState subjectThreadState;
    @Autowired
    private DefaultSecurityManager securityManager;


    protected void login(String userName, String password){
        assertTrue("userName can not be empty or null.", !StringUtils.isAnyEmpty(userName));
        assertTrue("password can not be empty or null.", !StringUtils.isAnyEmpty(password));
        setSecurityManager(securityManager);
        Subject subject = SecurityUtils.getSubject();
        subject.login(new UsernamePasswordToken(userName, password));
    }


    private void setSubject(Subject subject){
        doClearSubject();
        createThreadState(subject).bind();
    }


    private Subject getSubject(){
        return SecurityUtils.getSubject();
    }


    private ThreadState createThreadState(Subject subject){
        return new SubjectThreadState(subject);
    }


    private static void setSecurityManager(SecurityManager securityManager){
        SecurityUtils.setSecurityManager(securityManager);
    }


    private SecurityManager getSecurityManager(){
        return SecurityUtils.getSecurityManager();
    }


    private void doClearSubject(){
        if(subjectThreadState != null){
            subjectThreadState.clear();
            subjectThreadState = null;
        }
    }


    @After
    public void tearDown(){
        SecurityUtils.getSubject().logout();
    }
}

具体测试类

public class MarketActionServiceTest extends AbstractServiceTestWithShiro {
    @Autowired
    private MarketActionService marketActionService;


    @Test
    public void getAllByDivisionManager(){
        login("user01","123456");
        Page<MarketAction> page = marketActionService.getAll(1, "项目");
        int rows = jdbcTemplate.queryForObject("select count(*) from ila_market_action where brief like ?", Integer.class, "%项目%");
        assertEquals(page.getTotalElements(), rows);
        assertEquals(page.getSize(), 10);
    }


    @Test
    public void getAllBySales(){
        login("user02", "123456");
        Page<MarketAction> page = marketActionService.getAll(1, "");
        int rows = jdbcTemplate.queryForObject("select count(*) from ila_market_action where brief like ? and user_id = ?", Integer.class, new Object[]{"%%", ((User)SecurityUtils.getSubject().getPrincipal()).getId()});
        assertEquals(rows, page.getTotalElements());
    }


}